Your Cyber Path: How to Get Your Dream Cybersecurity Job · Kip Boyle

EP 105 : SDP 5 Work Factor

·34 min·2 clips

Kia and Hyundai chose a “fifty dollar club” instead of a permanent anti-theft fix.

1. Your Cyber Path: How to Get Your Dream Cybersecurity Job focuses EP 105 on work factor, the fifth secure design principle in the SDP series. 2. Kip Boyle is the host, Jason Dion is his co-host, and both draw on hiring, training, and security decision-making experience. 3. The episode asks how much effort security should force an attacker to spend before a target becomes unattractive. 4. Kip defines work factor as the effort required for someone to attack you and succeed. 5. He compares that concept to physical safes used for gold bullion, where a rating can describe how many hours a dedicated criminal would need. 6. Jason says attackers usually look for low-hanging fruit, so the goal is to become a harder target than the next victim. 7. Kip’s early-career mentor gave him a rule: “don’t spend a thousand dollars to build a fence to protect a hundred dollar horse.” 8. Jason uses his mother’s Kia Soul and the 2023 Kia and Hyundai anti-theft problem as a current example. 9. He explains that insurance companies began dropping coverage or requiring proof of an anti-theft device for affected vehicles. 10. The recall solution in the story was a steering-wheel club, which the dealer installed and photographed for insurance paperwork. 11. Kip argues that the club was a cheap, temporary answer rather than a permanent fix that stayed on the car. 12. He says the issue shows how business value must be weighed against the cost of protection. 13. Kip also compares a front-door lock to an alarm system and says the value of the asset should drive the control. 14. He describes years spent in government classified spaces where overclassification created storage and encryption costs. 15. Jason adds the formal definition from the paper: consider the cost of defeating security, the value of the asset, and the anticipated cost. 16. He says the resources available to the attacker matter, from an isolated cabin in the woods to a house in a dense neighborhood. 17. The tone is conversational, practical, and example-driven, with frequent back-and-forth between the hosts. 18. The format mixes explanation, anecdotes, and repeated clarification of terms like APT, zero-day, and reasonable cybersecurity. 19. People building security for small or mid-sized organizations will get the most value from this episode. 20. Listeners wanting high-level theory without business tradeoffs may skip it.

As heard by us

A theft example becomes a practical lesson on why adding friction can matter.

It frames work factor as a plain-English security lesson: if something is too easy to steal, insurers may push for more friction, and that can ripple into retrofit costs and fixes that are less than ideal in the real world.

Read the full review in PlayNext →

Why you'd press play

You want a clean explanation of why making theft harder changes the game.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Your Cyber Path: How to Get Your Dream Cybersecurity Job